I setup a lab to connect VyOS rolling release 2025.04.04-0018-rolling with PVE EVPN feature.
PVE FRR configuation is below
If and only if, it will connect and work, when VyOS configure top level BFD with PVE IPs (even without BGP-BFD config in peer-group), even I used the same configuration with PVE FRR did, but VyOS will not send out any BFD packet to others.
PVE configuration works properly and I can capture BFD packet from VyOS.
with 1.4.1, I only need to enable VTEP peer-group bfd, I don't need `protocol bfd peer XXXX`
I also tested several rolling version and the behavior of VyOS is the same.
This might relate to FRR PR #17410 , and this is only in master and stable/10.3 branch (not 10.2 branch)
https://github.com/FRRouting/frr/pull/17410
VyOS Config (IP: 10.0.0.254)
```
protocols {
bfd {
peer 10.0.0.1 {
}
peer 10.0.0.2 {
}
peer 10.0.0.3 {
}
}
bgp {
address-family {
l2vpn-evpn {
advertise-all-vni
}
}
neighbor 10.0.0.1 {
peer-group VTEP
}
neighbor 10.0.0.2 {
peer-group VTEP
}
neighbor 10.0.0.3 {
peer-group VTEP
}
peer-group VTEP {
address-family {
l2vpn-evpn {
soft-reconfiguration {
}
}
}
bfd {
}
remote-as internal
update-source 10.0.0.254
}
system-as 65000
}
}
```
PVE FRR (IP: 10.0.0.1)
```
!
frr version 10.2.1
frr defaults datacenter
hostname pve1
log syslog informational
no ip forwarding
no ipv6 forwarding
service integrated-vtysh-config
!
vrf vrf_pve
vni 100
exit-vrf
!
router bgp 65000
bgp router-id 10.0.0.1
no bgp enforce-first-as
no bgp hard-administrative-reset
no bgp default ipv4-unicast
coalesce-time 1000
no bgp graceful-restart notification
neighbor VTEP peer-group
neighbor VTEP remote-as 65000
neighbor VTEP bfd
neighbor 1.1.1.1 peer-group VTEP
neighbor 10.0.0.2 peer-group VTEP
neighbor 10.0.0.3 peer-group VTEP
neighbor 10.0.0.254 peer-group VTEP
!
address-family l2vpn evpn
neighbor VTEP activate
neighbor VTEP route-map MAP_VTEP_IN in
neighbor VTEP route-map MAP_VTEP_OUT out
advertise-all-vni
exit-address-family
exit
!
router bgp 65000 vrf vrf_pve
bgp router-id 10.0.0.1
no bgp enforce-first-as
no bgp hard-administrative-reset
no bgp graceful-restart notification
!
address-family ipv4 unicast
redistribute connected
exit-address-family
!
address-family ipv6 unicast
redistribute connected
exit-address-family
!
address-family l2vpn evpn
advertise ipv4 unicast
advertise ipv6 unicast
exit-address-family
exit
!
route-map MAP_VTEP_IN permit 1
exit
!
route-map MAP_VTEP_OUT permit 1
exit
!
end
```